Към съдържанието

CVE-2026-97412: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: pds_core: quiesce DMA before freeing resources pdsc_teardown() frees DMA buffers but does not disable bus mastering, leaving the device able to perform DMA after the buffers are freed. This can lead to use-after-free if the device writes to freed memory. Add pci_clear_master() to pdsc_teardown() to disable bus mastering before freeing resources, ensuring all DMA is quiesced. Add pci_set_master() to pdsc_setup() to re-enable bus mastering, which is needed for the firmware recovery path since pdsc_teardown() now disables it.

    Засегнати продукти

    • Linux Linux: 45d76f492938cdc27ddadc16e1e75103f4cfbf56 преди 84fc3f30b87e06a11d1807cd385603522610ed40; 45d76f492938cdc27ddadc16e1e75103f4cfbf56 преди cc8beb70e70fc90e54efdbc1128cf7de799e6be4; 45d76f492938cdc27ddadc16e1e75103f4cfbf56 преди 9eee6b90bee3df496ed9094d9e76d5e478d72d0a; 45d76f492938cdc27ddadc16e1e75103f4cfbf56 преди 6443f4f20bdae726fe01cf5946fba9742a0ffda6
    • Linux Linux: 6.4; преди 6.4; 6.6.160 до 6.6.*; 6.12.111 до 6.12.*; 6.18.53 до 6.18.*; от 7.2 нататък

    История

    • 24 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-97412: Linux | freedomonline.bg